aboutsummaryrefslogtreecommitdiffstats
path: root/Mailman/Cgi/subscribe.py (unfollow)
Commit message (Collapse)AuthorFilesLines
2018-06-17Bump copyright dates.Mark Sapiro1-0/+0
2018-06-03Separate data in CSRF token by colon to avoid collisions.Ralf Jung1-3/+3
This makes the data-to-token function injective. Previously, for example, the list called "list1" and the IP "10.0.0.0" would have the same hash as the list called "list" and the IP "110.0.0.0", as the strings were just concatenated.
2018-03-01Removed a Python 2.7 dependency introduced in 2.1.26.Mark Sapiro1-1/+1
2018-01-30Corrected i18n from rev. 1738 and updated message catalogs.Mark Sapiro1-3/+5
2018-01-30Update Japanese translation (with msgid fix)Yasuhito FUTATSUKI at POEM1-3/+3
2018-01-29Allow the list subscription form to be protected from spam bots usingDavid Siebörger1-0/+22
reCAPTCHA.
2017-06-05Bumped Copyrights and fixed a bug in prior commit.Mark Sapiro1-1/+1
2017-06-05Defend against CGI requests with multiple values for the same parameter.Mark Sapiro1-7/+7
2017-02-22Fixed an uncaught TypeError in the subscribe CGI.Mark Sapiro1-1/+1
2016-07-14Catch TypeError from certain defective crafted POST requests.Mark Sapiro1-2/+11
2015-06-23Support for HTTP_X_FORWARDED_FOR and HTTP_FORWARDED_FOR (RFC 7239) Jim Popovitch1-3/+4
2015-04-23If SUBSCRIBE_FORM_SECRET is enabled and a user's network has a loadMark Sapiro1-8/+21
balancer or similar in use the POSTing IP might not exactly match the GETting IP. This is now accounted for by not requiring the last octet (16 bits for ipV6) to match.
2014-03-21 - Added the list name to the vette log "held message approved" entry.Mark Sapiro1-2/+2
(LP: 1295875) - Added the CGI module name to various "No such list" error log entries. (LP: 1295875) - Modified contrib/mmdsr to report module name if present in "No such list error log entries.
2012-12-14Added a minimum delay between retrieval and submission of the subscribe form.Mark Sapiro1-0/+4
2012-11-24Implement SUBSCRIBE_FORM_SECRET to mitigate bot subscribes. (LP: 1082746)Mark Sapiro1-1/+19
2011-05-09Prevented setting user passwords with leading/trailing whitespace. Bug #778088.Mark Sapiro1-4/+4
2011-03-29Changed the subscribe CGI to strip leading and trailing whitespace fromMark Sapiro1-2/+2
the supplied email address. Bug #745432.
2010-03-29Added roster to the CGIs that return HTTP 401 status for an authenticationMark Sapiro1-0/+2
failure, and return HTTP 404 status from all CGIs for an invalid list name.
2009-01-20Two of the 'new' class exceptions are raised with an argument.Mark Sapiro1-4/+5
2005-08-27FSF office has moved to 51 Franklin Street.tkikuchi1-1/+1
2003-04-07Backporting from trunk.bwarsaw1-2/+0
2003-02-08Backporting from the trunk.bwarsaw1-6/+8